{"uuid": "83590ea9-dd4d-4b41-a332-1519809ad219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "title": "securityonline.info - Chrome Update Addresses High-Severity Vulnerability: CVE-2025-0291", "description": "# Chrome Update Addresses High-Severity Vulnerability: CVE-2025-0291\n\nRef: [https://securityonline.info/chrome-update-addresses-high-severity-vulnerability-cve-2025-0291/](https://securityonline.info/chrome-update-addresses-high-severity-vulnerability-cve-2025-0291/)\n\n<img src=\"https://cdn-0.securityonline.info/wp-content/uploads/2025/01/Screenshot-2025-01-08-082901.png\">\n\nGoogle has just released a critical security update for its Chrome web browser, addressing a high-severity vulnerability that could leave users open to attack. The update, rolling out to Windows, Mac, and Linux users over the next few days, patches a \u201cType Confusion\u201d flaw in V8, the JavaScript engine that powers Chrome.\n\nThis vulnerability, tracked as CVE-2025-0291, was discovered by security researcher Popax21 and reported to Google on December 11th, 2024. Type Confusion vulnerabilities are particularly dangerous as they can allow attackers to execute malicious code on a user\u2019s system. This can lead to a range of consequences, from data theft and system crashes to complete takeover of the affected device. Google has awarded a bounty of $55,000 to Popax21 for the discovery and responsible disclosure of the bug.\n\nType Confusion vulnerabilities occur when a program mistakenly treats data as a different type than originally intended. In the context of V8, this can lead to out-of-bounds memory access, allowing attackers to manipulate memory, crash the browser, or execute arbitrary code. Such vulnerabilities are often exploited in sophisticated attacks, making their timely resolution critical for user safety.\n\nGoogle urges all users to update their Chrome browsers to the latest version (131.0.6778.264/.265 for Windows and Mac, 131.0.6778.264 for Linux) as soon as possible. Here\u2019s how:\n\n1.  **Open Chrome.**\n2.  **Click the three vertical dots** in the top right corner.\n3.  Go to **Help &gt; About Google Chrome.**\n4.  Chrome will automatically **check for updates** and install the latest version.\n5.  **Relaunch Chrome** to complete the update.\n\n### Related Posts:\n\n*   [New Chrome 0-Day Bug Under Active Attack](https://securityonline.info/cve-2022-4262-chrome-0-day-vulnerability/)\n*   [New WiFi Flaw Leaves All Devices Vulnerable to \u2018SSID Confusion\u2019 Attacks](https://securityonline.info/cve-2023-52424-new-wifi-flaw-leaves-all-devices-vulnerable-to-ssid-confusion-attacks/)\n*   [Chrome will no longer flag HTTPS pages as secure sites](https://securityonline.info/chrome-will-no-longer-flag-https-pages-as-secure-sites/)", "description_format": "markdown", "vulnerability": "CVE-2025-0291", "creation_timestamp": "2025-01-08T08:27:43.168816+00:00", "timestamp": "2025-02-12T06:52:50.539121+00:00", "related_vulnerabilities": ["CVE-2023-52424", "CVE-2022-4262", "CVE-2025-0291"], "meta": [{"tags": ["vulnerability:information=annotation"]}], "author": {"login": "sync_user", "name": "sync_user", "uuid": "4f29edb9-4c4b-44ca-b041-9b050656b6ae"}}